InfoSecBulletin Cybersecurity for mankind
Germany’s top court ruled on Thursday that police can secretly install spy software on phones and computers only for serious crimes.
Key Points:
German police read Signal, Telegram, WhatsApp messages without breaking encryption
Urgent Patch! cPanel, GitLab Flaws Expose Users to RCE, File and Credential Theft
Palo Alto PAN-OS Flaw Enables Root Arbitrary Code Execution
Critical Check Point VPN flaws allow remote code execution attacks
Cisco confirms CVE-2026-20079 flaw in Secure FMC is exploited in attacks
Hackers exploit PaperCut flaws using hundreds of AI agents, compromising 440 servers globally
CISA Says Chinese Firms Extracted Billions of Tokens From Frontier AI Models
Nightmare Eclipse Drops New Microsoft Defender ‘ShieldCrash’ zero-day
cPanel Flaw Lets Hosting Accounts With Mail Privileges Execute Code as Root
FortiSandbox, FortiOS, FortiProxy ZTNA flaws unveil, while Fortigate firewall actively exploited
German high court has limited the use of police spy software to serious criminal investigations.
The court called the use of spyware a “serious interference” with privacy rights.
The ruling came from a complaint by a digital rights group that a 2017 law was too broad.
Police cannot use spyware to investigate crimes, as this would violate the law, which carries a maximum sentence of three years.
Digital rights group Digitalcourage in Germany raised concerns about a 2017 reform that permits police to use spy software to monitor encrypted chats, such as WhatsApp, which could impact innocent individuals as well.
The court stated that the 2017 reform of the criminal procedure code was too vague about surveillance areas.
The court states that this kind of surveillance is a serious invasion and should only be used for investigating extremely serious crimes.
As a result, police cannot monitor telecommunications when investigating crimes that carry a maximum sentence of three years as they are not serious enough.
The court stated that investigators’ ability to secretly search suspects’ computers and smartphones partially conflicts with Germany’s Basic Law, but this will continue until new regulations are established.
Cyberattack hits France’s third-largest mobile operator, affecting millions
